How can I keep my account secure?

To keep your account secure, follow these guidelines:

1. Use a strong and unique password: Choose a password that is difficult to guess and not used for any other accounts. A strong password should be at least 12 characters long and include a mix of uppercase and lowercase letters, numbers, and special characters. Don't share your password with anyone, online or in person, If you do, then change your password as soon as possible.
2. Enable two-factor authentication (2FA): 2FA adds an extra layer of security to your account by requiring a verification code in addition to your password. This makes it much harder for unauthorized users to access your account.
3. Never share your login information: Scammers may create fake websites that look like the Model API login page and then encourage you to access them and enter your login details. This is a phishing scam. Here are a few tips to avoid phishing scams:

• Always check a website's URL before you enter your login information. When in doubt, type dev.meta.ai into your browser to log into your account.
• Don't forward emails or messages from Meta to other people. These emails or messages may contain sensitive information about your accounts.
• Don't click any links or attachments from suspicious emails or messages.
• Don't trust emails or messages that demand money, offer gifts or threaten to delete or ban your account.
• Don't respond to emails or messages that ask for your password, social security number, or credit card information.

1. Monitor your account activity: Regularly check your account activity, such as login activity, API request logs and usage statistics, to detect any suspicious behavior.
2. Watch out for malicious software: Malicious software can cause damage to a computer, server or computer network. Signs of malicious software include suspicious login activity, applications taking longer to respond, and pop ups and ads that appear without opening a web browser.
3. Use API keys securely: Generate and use secure API keys for your applications. Avoid hardcoding API keys in your code; instead, use environment variables or a secure secrets management system.
4. Rotate API keys regularly: Periodically rotate your API keys to minimize the impact of a potential key compromise.
5. Keep your applications and dependencies up-to-date: Ensure that your applications and dependencies are using the latest security patches and updates to prevent exploitation of known vulnerabilities.
6. Never share your API key outside your team. Sharing API keys with anyone outside your team — including friends, family, or third parties — is against the Terms of Service. Anyone outside your team who needs access should use their own Model API account and API keys.

By following these best practices, you can significantly improve the security of your account and protect your data and applications.

Additional Resources

• For more information on API keys, see Authentication within Meta Model API Documentation.